特定のLambda@Edgeが使われているCloudFrontのURLをAWS CLIで抽出してみた

chmod +x list_lambda_urls.sh
./list_lambda_urls.sh <Lambda@EdgeのARN> [debug]

Distribution ID: EXXXXXXXXXXXXX
Domain Name: dxxxxxxxxxxxxxx.cloudfront.net
Alias: example.com
Effective Domain: example.com
Default Behavior URL: https://example.com/

Cache Behavior URLs:
  URL: https://example.com/images/*
---

#!/bin/bash

# スクリプトの使用方法: ./script.sh <Lambda@Edge のARN> [debug]
# 例: ./script.sh arn:aws:lambda:us-east-1:123456789012:function:my-function:1 debug
# debug を指定すると、生のJSONを distributions.json に保存します。
# 前提: AWS CLI がインストールされ、適切な権限が設定されていること。また、jq がインストールされていること。

LAMBDA_ARN="$1"
DEBUG="$2"

if [ -z "$LAMBDA_ARN" ]; then
  echo "Usage: $0 <LAMBDA_ARN> [debug]"
  exit 1
fi

if ! command -v jq >/dev/null 2>&1; then
  echo "Error: jq is required but not installed. Install jq to run this script."
  exit 1
fi

# CloudFront ディストリビューションのリストを取得
DISTRIBUTIONS=$(aws cloudfront list-distributions --output json 2>/dev/null)

if [ $? -ne 0 ]; then
  echo "Error: Failed to execute 'aws cloudfront list-distributions'. Check AWS CLI configuration and permissions."
  exit 1
fi

# デバッグモードで生JSONを保存
if [ "$DEBUG" = "debug" ]; then
  echo "$DISTRIBUTIONS" > distributions.json
  echo "Debug: Raw JSON saved to distributions.json"
fi

# ディストリビューションが存在するかチェック
if [ -z "$DISTRIBUTIONS" ] || [ "$(echo "$DISTRIBUTIONS" | jq 'if .DistributionList.Items then .DistributionList.Items | length else 0 end')" == "0" ]; then
  echo "No CloudFront distributions found."
  exit 0
fi

# jq でディストリビューションを解析し、Lambda@Edge の関連を抽出（出力形式をURLベースに変更、EventTypeとIncludeBodyを削除）
echo "$DISTRIBUTIONS" | jq -r --arg arn "$LAMBDA_ARN" '
  (if .DistributionList.Items then .DistributionList.Items else [] end) |
  .[] |
  {
    Id: .Id,
    DomainName: .DomainName,
    Alias: (if .Aliases.Items[0] then .Aliases.Items[0] else "None" end),
    EffectiveDomain: (if .Aliases.Items[0] then .Aliases.Items[0] else .DomainName end),
    Default: (
      (if .DefaultCacheBehavior.LambdaFunctionAssociations.Items then .DefaultCacheBehavior.LambdaFunctionAssociations.Items else [] end) |
      [.[] | select(.LambdaFunctionARN == $arn)]
    ),
    Behaviors: (
      (if .CacheBehaviors.Items then .CacheBehaviors.Items else [] end) |
      [.[] | {
        Path: (if .PathPattern then .PathPattern else "None" end),
        Associations: (
          (if .LambdaFunctionAssociations.Items then .LambdaFunctionAssociations.Items else [] end) |
          [.[] | select(.LambdaFunctionARN == $arn)]
        )
      } | select(.Associations != [])]
    )
  } |
  select(.Default != [] or .Behaviors != []) | 
  ( .EffectiveDomain as $eff |
  "Distribution ID: \(.Id)\nDomain Name: \(.DomainName)\nAlias: \(.Alias)\nEffective Domain: \(.EffectiveDomain)\n" +
  (if .Default != [] then
    "Default Behavior URL: https://\($eff)/\n"
  else
    ""
  end) +
  (if .Behaviors != [] then
    "Cache Behavior URLs:\n" + (.Behaviors | map("  URL: https://\($eff)/\(.Path)") | join("\n"))
  else
    ""
  end) + "\n---"
  )
'

# 出力がない場合のメッセージ
if [ $? -ne 0 ]; then
  echo "Error: jq failed to process the data. Check distributions.json for issues if debug mode was used."
else
  if [ -z "$(echo "$DISTRIBUTIONS" | jq -r --arg arn "$LAMBDA_ARN" '(if .DistributionList.Items then .DistributionList.Items else [] end) | .[] | select(((if .DefaultCacheBehavior.LambdaFunctionAssociations.Items then .DefaultCacheBehavior.LambdaFunctionAssociations.Items else [] end)[]?.LambdaFunctionARN == $arn) or ((if .CacheBehaviors.Items then .CacheBehaviors.Items else [] end)[]? | (if .LambdaFunctionAssociations.Items then .LambdaFunctionAssociations.Items else [] end)[]?.LambdaFunctionARN == $arn))')" ]; then
    echo "No behaviors found associated with Lambda ARN: $LAMBDA_ARN"
  fi
fi